All Apps and Add-ons

Splunk Add-on for Microsoft Cloud Services, splunk is not able to read .gz blob files, how do I fix this?

Log_wrangler
Builder

I am using Splunk Add-on for Microsoft Cloud Services to ingest .gz log files from blob storage.

When I look in the index for these logs.gz, all I see is garble. The source indicates .gz, but I don't understand why Splunk cannot unzip and read it.

Here is a sample...

�Y�Q[��MK�@����%��k6�����    I{YD�x��R��L�����0�3sN��0<���&�R�Tf��B����ZICB�Tt�a�̛۪X��.�6ܶ���n���Pn�����u<��ٿ������ܺ+�k��<ɕ��'���C�"��M]U����0�� �0�A�O��P��y��N  bLNM&;�H.����f���f��!�S�F�B}x|3�>��a�k$3;��[`v�!7gg�ah�����"�o�)!��z<[��,��S�0ة�|����
-�s�


source = logs/20180720-11_0.gz

Please advise.

Thank you

Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...